Without having a trustable certificate, the connection can be MITM'ed anyways. A... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		blueflow 3 months ago \| parent \| context \| favorite \| on: Spinning Up an Onion Mirror Is Stupid Easy Without having a trustable certificate, the connection can be MITM'ed anyways. Anyone can produce a self-signed cert on demand.

immibis 3 months ago [–]

Onion addresses are unforgeable and traffic is encrypted. http over .onion is comparable to http over tls.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact